The Personal Data Protection Department (PDPD) is investigating a private company over allegations that its customer data has been leaked online.
In a statement, the PDPD said it was investigating Bangsa Bertauhid Sdn Bhd, after being notified by Malaysia Computer Emergency Response Team (MyCert) and CyberSecurity Malaysia (CSM) on July 4.
"PDPD has contacted the company regarding the incident and to verify the sample data (that was obtained)," the department said.
The company was asked to file a data breach notification. Following which, company owner Nur Ahmad Faiz Mohd Azmi was called in for questioning on July 13.
Bangsa Bertauhid runs a crowdfunding platform known as Misi Rakyat during the height of the Covid-19 pandemic. Following this, Misi Rakyat expanded into a food delivery app.
In June, Misi Rakyat launched a new campaign to raise RM20 million for its Misi Farms campaign, aimed at empowering farmers by eliminating the middlemen.
However, the plan was jettisoned earlier this month after Bank Negara issued a warning on its Facebook page against suspicious fund collection.
The next day, Nur Ahmad announced that he would be refunding about RM400,000 after admitting that the screenshot used as an example by Bank Negara was linked to Misi Farms.
According to PDPD, the leaked database was uploaded to "BreachForums" and Telegram on July 3 and 4.
It is unsure if PDPD was referring to infamous cyber threat actor website Breach Forums that was shut down by a multinational task force in March this year.
The website was known for trading datasets containing personal information that was sourced from all over the world.
In 2022, one dataset allegedly from a Malaysian government agency containing information of 22.5 million Malaysians was advertised on the forum for US$10,000. One of the samples used include information allegedly belonging to then home minister Hamzah Zainuddin.
According to the Personal Data Protection Act 2010, the PDPD can only take action against private entities. - Mkini
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.